$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: nBQtAvOVZSS8XCgYWlAzK7BGJSzGPRE7zDPJrBzHrfE= Subject key identifier: 15:F9:38:FD:C1:9B:6F:C7:D7:33:8D:72:E9:BB:7E:68:A0:FA:BD:D1 Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 587F61228693CFCF2868325C422A6E5F487B6776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 04D1 Signing time: Fri 09 May 2025 08:51:18 +0000 Manifest this update: Fri 09 May 2025 08:46:18 +0000 Manifest next update: Mon 12 May 2025 19:57:18 +0000 Files and hashes: 1: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: z+Z37i7JsQEV2jpC21eVJxiNyMbddIwQKtEweXUv04Q=) 2: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) 3: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: PFQ7FpN31YAHFpzC7fGpvPtUM9Dv0WNkJWYV7s1UY68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 19:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7f:61:22:86:93:cf:cf:28:68:32:5c:42:2a:6e:5f:48:7b:67:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: May 9 08:46:18 2025 GMT Not After : May 12 19:57:18 2025 GMT Subject: CN=15F938FDC19B6FC7D7338D72E9BB7E68A0FABDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:53:15:c1:fd:50:e8:0c:57:53:cc:96:08: a3:89:08:71:19:72:d0:86:85:e6:e2:6c:6b:14:2b: 78:b9:50:2b:60:aa:8a:8b:d1:78:86:49:b2:b0:f8: fb:1e:e9:4c:8a:36:fd:2a:ed:03:0e:a3:e5:7d:50: 25:f5:d1:f8:d5:46:9e:e8:dd:95:c9:f3:25:ca:d9: f3:72:ef:02:a1:6f:de:ee:41:bc:81:19:44:6c:87: 7d:b2:d4:12:15:48:f8:65:7e:d3:1b:76:17:b6:27: 00:ae:22:27:71:c7:f5:d4:4f:38:b7:c8:73:c5:a9: d7:86:58:b8:07:62:8c:e4:b8:ba:3a:78:39:df:b0: e8:b8:f7:a0:df:4b:44:ab:86:bb:8f:93:a4:00:43: b4:6e:65:77:b4:42:0e:bf:96:33:80:05:3c:48:df: 1f:39:89:e5:07:03:df:5e:aa:9e:a0:18:46:f0:a5: e9:b3:e8:32:32:7c:00:a7:79:43:0c:5c:15:a5:6e: 11:18:de:30:37:86:a1:30:a9:41:5e:8f:2d:47:c1: 64:95:a3:93:57:27:bc:92:b3:09:72:1a:98:79:4e: af:f1:40:90:93:42:0d:c5:25:3c:43:21:64:85:4e: d2:c7:8e:cf:eb:23:ed:26:85:7c:a3:48:da:28:63: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F9:38:FD:C1:9B:6F:C7:D7:33:8D:72:E9:BB:7E:68:A0:FA:BD:D1 X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:83:fc:a6:f1:2f:88:7a:85:c5:ec:44:57:68:94:86:9b:2e: 0b:77:93:04:14:10:3f:31:f8:f4:b4:4a:af:2a:80:2a:67:96: 54:81:88:eb:67:bd:8a:82:a4:6e:e4:10:9c:d6:e8:f7:0b:59: 90:6b:78:60:08:66:c5:52:01:c5:6e:a6:0d:16:5d:a5:dd:d0: b9:1f:00:a3:4b:0f:75:86:24:60:ec:f1:f5:1a:0a:49:3b:dd: 61:72:9f:19:87:09:72:26:51:a9:d9:b1:28:da:5e:ab:02:de: d4:59:33:5e:29:a6:41:9d:65:c4:ab:e6:7f:42:16:78:42:76: 89:73:90:dc:00:f8:0b:f2:6e:82:5a:fc:d6:83:4b:24:69:55: d7:4f:94:35:f4:d8:2a:25:e7:be:e6:37:49:7c:fd:21:9e:22: 25:26:ed:42:d6:2f:08:25:d1:82:4b:bf:8f:22:2c:6a:b4:e1: 85:e5:d9:7d:e9:03:cf:53:c9:d8:e6:da:09:7f:f6:6e:0a:38: 75:b6:16:63:fc:e9:f3:78:2f:65:33:71:04:96:99:35:6a:6b: dd:7a:14:e6:f7:19:2f:e8:5f:c5:53:29:f4:3b:54:53:19:1f: ea:af:2d:f2:6e:b2:62:e9:37:84:b8:12:73:c0:9d:dd:2b:4e: 96:81:f0:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWH9hIoaTz88oaDJcQipuX0h7Z3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA1MDkwODQ2MThaFw0yNTA1MTIxOTU3MThaMDMxMTAvBgNV BAMTKDE1RjkzOEZEQzE5QjZGQzdENzMzOEQ3MkU5QkI3RTY4QTBGQUJERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJlMVwf1Q6AxXU8yWCKOJCHEZ ctCGhebibGsUK3i5UCtgqoqL0XiGSbKw+Pse6UyKNv0q7QMOo+V9UCX10fjVRp7o 3ZXJ8yXK2fNy7wKhb97uQbyBGURsh32y1BIVSPhlftMbdhe2JwCuIidxx/XUTzi3 yHPFqdeGWLgHYozkuLo6eDnfsOi496DfS0SrhruPk6QAQ7RuZXe0Qg6/ljOABTxI 3x85ieUHA99eqp6gGEbwpemz6DIyfACneUMMXBWlbhEY3jA3hqEwqUFejy1HwWSV o5NXJ7ySswlyGph5Tq/xQJCTQg3FJTxDIWSFTtLHjs/rI+0mhXyjSNooY0tpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFfk4/cGbb8fXM41y6bt+aKD6vdEwHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCD/KbxL4h6hcXsRFdolIabLgt3kwQUED8x +PS0Sq8qgCpnllSBiOtnvYqCpG7kEJzW6PcLWZBreGAIZsVSAcVupg0WXaXd0Lkf AKNLD3WGJGDs8fUaCkk73WFynxmHCXImUanZsSjaXqsC3tRZM14ppkGdZcSr5n9C FnhCdolzkNwA+AvyboJa/NaDSyRpVddPlDX02Col577mN0l8/SGeIiUm7ULWLwgl 0YJLv48iLGq04YXl2X3pA89Tydjm2gl/9m4KOHW2FmP86fN4L2UzcQSWmTVqa916 FOb3GS/oX8VTKfQ7VFMZH+qvLfJusmLpN4S4EnPAnd0rTpaB8JU= -----END CERTIFICATE-----Generated at Sun May 11 08:49:54 2025 by rpki-client